Cashleaf Privacy Policy

Effective date: 2026-10-04

Cashleaf ("the app") is a cash book provided by DDJ A1 ("we", "us"). It lets you keep one or more cash books, record money coming in and going out, see a running balance, carry balances over between periods, search your entries and create period reports. Cashleaf is deliberately designed as a local-only app: it has no account system, no login, no server, and no cloud storage operated by us.

Data stored on your device

Everything you enter — your cash books, their opening balances, your entries (amounts, dates, notes), items in the trash, and your app preferences — is stored only on your device and is never transmitted to us. There is no sign-up, account, or login. Deleting the app deletes all of this data from your device. Android's standard app backup may include this data in your own Google account backup if you have device backup enabled; that backup is controlled by you and Google, not by us.

Backup files, reports and sharing

When you create a backup file, or export a report as a PDF, CSV or image, the app writes the file only to the location you choose with the system file picker or sends it only to the destination you pick in the system share sheet (for example a messaging app or your own cloud drive). Restoring reads only the file you select. Those files and their safekeeping are under your control; we never receive them.

Permissions the app asks for and why

• Notifications (POST_NOTIFICATIONS, optional). For the daily reminder to record today's cash, which you can turn on or off and reschedule in Settings. Reminders are scheduled and shown locally.
• Run at startup (RECEIVE_BOOT_COMPLETED). Android discards scheduled reminders when the device restarts. The app listens for this event only to re-register your own reminder.
• Vibration (VIBRATE). For the reminder.
• App lock (USE_BIOMETRIC / USE_FINGERPRINT, optional). If you turn on App lock, the app asks Android to confirm it is you using your existing screen lock, fingerprint or face unlock. The app never sees or stores your biometric data or your screen-lock code.
• Internet access (INTERNET, ACCESS_NETWORK_STATE) and the advertising identifier (AD_ID). Used only by the advertising components described below. No feature of the app itself sends or receives data over the network.

The app does not request access to your location, contacts, camera, microphone, SMS, or the content of other apps, and it does not connect to your bank.

Information collected automatically

When you use the app, certain information may be collected automatically by third-party SDKs used for advertising. This may include:

• Your device's Internet Protocol (IP) address, which may be used to estimate your approximate (general) location
• Device or other identifiers, such as your device's advertising identifier (Advertising ID) and app set ID
• App interactions, such as session time, screens viewed, and ad views and taps
• Crash logs and diagnostic information, such as the mobile operating system and device model you use and ad performance data

This information is collected by the advertising SDK and shared with Google (AdMob) and its advertising partners for advertising, analytics, and fraud prevention, security and compliance purposes. It is encrypted in transit. It is not linked by us to your cash books or entries, which stay on your device.

Advertising

The app displays advertisements provided by Google AdMob. Ads are never shown on the entry screen where you type an amount. To serve ads, AdMob and its partners may access your device's Advertising ID and the information described above. For users in the European Economic Area (EEA), the United Kingdom, and other regions where required, the app presents a consent form via Google's User Messaging Platform (UMP) before personalized advertising data is used; if you decline, non-personalized ads are shown instead. You can reset or limit ad personalization at any time in your device settings (Settings → Google → Ads), and you can change your consent choice from the app's Settings screen.

For more information on how Google uses data when you use partners' apps, see https://policies.google.com/technologies/partner-sites.

Accuracy

Cashleaf is a record-keeping tool. Balances and reports are calculated from the entries you type in; the app does not connect to any bank or payment service and is not financial, tax or accounting advice.

Children

The app is not directed to children under 13, and we do not knowingly collect personal information from children. The app displays ads configured through Google AdMob in accordance with Google's policies.

Your rights

Because your records exist only on your device, you are in direct control of them: you can view, edit, or delete them in the app at any time, and uninstalling the app removes them completely. Depending on your region (e.g. GDPR in the EEA/UK, CCPA in California), you may also have rights regarding data processed by advertising SDKs; you can exercise ad-related choices through the consent form and your device's ad settings described above.

Security

Your records stay on your device, which removes the most common exposure paths (server breaches, account leaks). You can turn on App lock in Settings, and we recommend protecting your device with a screen lock and keeping backup files somewhere only you can access.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

If you have any questions about privacy while using the app, or about this policy, contact us at bloodturtle@naver.com.